Есть ВДС с туннелем до брокера с ipv6, выделено две сети - одна /64 сеть, вторая /48.На этой ВДС хочу поднять OpenVPN и раздавать /64 выделенную из /48. Всё подключается, адреса раздаются, но на интерфейсе убунты появляются странные адреса.
2001:470:b787:1234::/64 сеть под vpn
root@note-ubuntu:~# ip a s dev tap0
7: tap0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UNKNOWN group default qlen 100
link/ether 2a:e9:66:24:04:d2 brd ff:ff:ff:ff:ff:ff
inet 172.16.16.2/24 brd 172.16.16.255 scope global tap0
valid_lft forever preferred_lft forever
inet6 2001:470:b787:0:d8ee:ad38:ce42:1ddf/64 scope global temporary dynamic
valid_lft 86202sec preferred_lft 14202sec
inet6 2001:470:b787:0:28e9:66ff:fe24:4d2/64 scope global mngtmpaddr dynamic
valid_lft 86202sec preferred_lft 14202sec
inet6 2001:470:b787:1234::1000/64 scope global
valid_lft forever preferred_lft forever
inet6 fe80::28e9:66ff:fe24:4d2/64 scope link
valid_lft forever preferred_lft forever
Вот что это за адреса 2001:470:b787:0:d8ee:ad38:ce42:1ddf/64 scope global temporary dynamic и 2001:470:b787:0:28e9:66ff:fe24:4d2/64 scope global mngtmpaddr dynamic ?
Проблема в том, что с клиента не могу достучаться до сервера
root@note-ubuntu:~# ping6 2001:470:b787:1234::1 -c4
PING 2001:470:b787:1234::1(2001:470:b787:1234::1) 56 data bytes
From 2001:470:b787:0:d8ee:ad38:ce42:1ddf icmp_seq=1 Destination unreachable: Address unreachable
From 2001:470:b787:0:d8ee:ad38:ce42:1ddf icmp_seq=2 Destination unreachable: Address unreachable
From 2001:470:b787:0:d8ee:ad38:ce42:1ddf icmp_seq=3 Destination unreachable: Address unreachable
From 2001:470:b787:0:d8ee:ad38:ce42:1ddf icmp_seq=4 Destination unreachable: Address unreachable
--- 2001:470:b787:1234::1 ping statistics ---
4 packets transmitted, 0 received, +4 errors, 100% packet loss, time 2999ms
root@note-ubuntu:~# ip -6 r
2001:470:b787::/64 dev tap0 proto kernel metric 256 expires 86043sec pref medium
2001:470:b787:1234::/64 dev tap0 proto kernel metric 256 pref medium
2000::/3 via 2001:470:b787:1234::1 dev tap0 metric 1024 pref medium
fe80::/64 dev wlp2s0 proto kernel metric 256 pref medium
fe80::/64 dev tap0 proto kernel metric 256 pref medium
Хотя с сервера клиент пингуется
[root@s1 ~]# ping6 2001:470:b787:1234::1000 -c4
PING 2001:470:b787:1234::1000(2001:470:b787:1234::1000) 56 data bytes
64 bytes from 2001:470:b787:1234::1000: icmp_seq=1 ttl=64 time=33.7 ms
64 bytes from 2001:470:b787:1234::1000: icmp_seq=2 ttl=64 time=31.4 ms
64 bytes from 2001:470:b787:1234::1000: icmp_seq=3 ttl=64 time=30.2 ms
64 bytes from 2001:470:b787:1234::1000: icmp_seq=4 ttl=64 time=34.9 ms
--- 2001:470:b787:1234::1000 ping statistics ---
4 packets transmitted, 4 received, 0% packet loss, time 3005ms
rtt min/avg/max/mdev = 30.263/32.609/34.985/1.874 ms
В общем если удалить эти адреса "лишние" адреса, то у клиента всё заработает
root@note-ubuntu:~# ip a s dev tap0
7: tap0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UNKNOWN group default qlen 100
link/ether 2a:e9:66:24:04:d2 brd ff:ff:ff:ff:ff:ff
inet 172.16.16.2/24 brd 172.16.16.255 scope global tap0
valid_lft forever preferred_lft forever
inet6 2001:470:b787:1234::1000/64 scope global
valid_lft forever preferred_lft forever
inet6 fe80::28e9:66ff:fe24:4d2/64 scope link
valid_lft forever preferred_lft forever
root@note-ubuntu:~# ping6 2001:470:b787:1234::1 -c2
PING 2001:470:b787:1234::1(2001:470:b787:1234::1) 56 data bytes
64 bytes from 2001:470:b787:1234::1: icmp_seq=1 ttl=64 time=33.8 ms
64 bytes from 2001:470:b787:1234::1: icmp_seq=2 ttl=64 time=35.7 ms
--- 2001:470:b787:1234::1 ping statistics ---
2 packets transmitted, 2 received, 0% packet loss, time 1001ms
rtt min/avg/max/mdev = 33.881/34.798/35.716/0.936 ms
Конфиг OpenVPN
port 1194
proto udp
dev tap
ca ca.crt
cert server.crt
key server.key
dh dh2048.pem
server 172.16.16.0 255.255.255.0
server-ipv6 2001:470:b787:1234::/64
push "route-ipv6 2000::/3"
route-ipv6 2001:470:b787:1234::/64
keepalive 10 120
comp-lzo
user nobody
group nobody
persist-key
persist-tun
status openvpn-status.log
log openvpn.log
log-append openvpn.log
verb 3